@salesforce/b2c-tooling-sdk 1.10.0 → 1.11.0

package/dist/cjs/auth/index.js

@@ -1,76 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-/**
- * Authentication strategies for B2C Commerce APIs.
- *
- * This module provides different authentication mechanisms for connecting to
- * B2C Commerce instances and platform services.
- *
- * ## Available Strategies
- *
- * - {@link BasicAuthStrategy} - Username/password authentication for WebDAV operations
- * - {@link OAuthStrategy} - OAuth 2.0 client credentials for OCAPI and platform APIs
- * - {@link JwtOAuthStrategy} - OAuth 2.0 JWT Bearer (certificate-based authentication)
- * - {@link ImplicitOAuthStrategy} - Interactive browser-based OAuth for CLI/desktop apps
- * - {@link ApiKeyStrategy} - API key authentication for MRT services
- *
- * ## Strategy Resolution
- *
- * Use {@link resolveAuthStrategy} to automatically select the best strategy based on
- * available credentials and allowed methods:
- *
- * ```typescript
- * import { resolveAuthStrategy } from '@salesforce/b2c-tooling-sdk';
- *
- * // Automatically picks client-credentials if secret available, otherwise implicit
- * const strategy = resolveAuthStrategy({
- *   clientId: 'your-client-id',
- *   clientSecret: process.env.CLIENT_SECRET, // may be undefined
- * });
- *
- * // Force a specific method
- * const implicitOnly = resolveAuthStrategy(
- *   { clientId: 'your-client-id' },
- *   { allowedMethods: ['implicit'] }
- * );
- * ```
- *
- * ## Direct Usage
- *
- * All strategies implement the {@link AuthStrategy} interface:
- *
- * ```typescript
- * import { OAuthStrategy, ImplicitOAuthStrategy } from '@salesforce/b2c-tooling-sdk';
- *
- * // For automated/server usage (client credentials)
- * const oauthAuth = new OAuthStrategy({
- *   clientId: 'your-client-id',
- *   clientSecret: 'your-client-secret',
- * });
- *
- * // For interactive/CLI usage (opens browser)
- * const implicitAuth = new ImplicitOAuthStrategy({
- *   clientId: 'your-client-id',
- * });
- * ```
- *
- * @module auth
- */
-export { ALL_AUTH_METHODS } from './types.js';
-// Strategies
-export { BasicAuthStrategy } from './basic.js';
-export { OAuthStrategy, decodeJWT } from './oauth.js';
-export { ImplicitOAuthStrategy } from './oauth-implicit.js';
-export { JwtOAuthStrategy } from './oauth-jwt.js';
-export { ApiKeyStrategy } from './api-key.js';
-export { StatefulOAuthStrategy } from './stateful-oauth-strategy.js';
-// Stateful auth store
-export { initializeStatefulStore, getStoredSession, setStoredSession, clearStoredSession, isStatefulTokenValid, resetStatefulStoreForTesting, } from './stateful-store.js';
-// Resolution helpers
-export { resolveAuthStrategy, checkAvailableAuthMethods } from './resolve.js';
-// Auth middleware
-export { globalAuthMiddlewareRegistry, AuthMiddlewareRegistry, applyAuthRequestMiddleware, applyAuthResponseMiddleware, } from './middleware.js';
-//# sourceMappingURL=index.js.map

package/dist/cjs/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAeH,OAAO,EAAC,gBAAgB,EAAC,MAAM,YAAY,CAAC;AAE5C,aAAa;AACb,OAAO,EAAC,iBAAiB,EAAC,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAC,aAAa,EAAE,SAAS,EAAC,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAC,qBAAqB,EAAC,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAC,gBAAgB,EAAC,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAC,cAAc,EAAC,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAC,qBAAqB,EAAC,MAAM,8BAA8B,CAAC;AAGnE,sBAAsB;AACtB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAG7B,qBAAqB;AACrB,OAAO,EAAC,mBAAmB,EAAE,yBAAyB,EAAC,MAAM,cAAc,CAAC;AAG5E,kBAAkB;AAClB,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC"}

package/dist/cjs/auth/jwt-utils.d.ts

@@ -1,25 +0,0 @@
-/** Default buffer (seconds) before token `exp` to consider the token expired. */
-export declare const DEFAULT_EXPIRY_BUFFER_SEC = 60;
-/**
- * Extract `scope` from a decoded JWT payload. Tolerates both the (legacy)
- * space-delimited string form and the array form.
- */
-export declare function extractJwtScopes(payload: Record<string, unknown>): string[];
-/**
- * Decode a JWT and return its `expires` Date and `scopes` array. Errors from
- * `decodeJWT` propagate to the caller — callers that want a soft-fail should
- * wrap this in try/catch.
- */
-export declare function decodeJwtTokenInfo(token: string): {
-    expires: Date;
-    scopes: string[];
-};
-/**
- * Returns `true` if the token is non-empty, decodes successfully, has not
- * expired (with a small buffer), and includes all required scopes.
- *
- * @param token - The JWT access token
- * @param requiredScopes - Scopes that must all be present in the token (default: none)
- * @param expiryBufferSec - Treat token as expired this many seconds before its real `exp`
- */
-export declare function isJwtTokenValid(token: string, requiredScopes?: string[], expiryBufferSec?: number): boolean;

package/dist/cjs/auth/jwt-utils.js

@@ -1,66 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-/**
- * Shared helpers for working with decoded JWT access tokens. Centralizes the
- * `exp` / `scope` extraction patterns that previously lived in multiple auth
- * strategy files.
- *
- * @module auth/jwt-utils
- */
-import { decodeJWT } from './oauth.js';
-/** Default buffer (seconds) before token `exp` to consider the token expired. */
-export const DEFAULT_EXPIRY_BUFFER_SEC = 60;
-/**
- * Extract `scope` from a decoded JWT payload. Tolerates both the (legacy)
- * space-delimited string form and the array form.
- */
-export function extractJwtScopes(payload) {
-    const scope = payload.scope;
-    if (scope == null)
-        return [];
-    return Array.isArray(scope) ? scope : scope.split(' ');
-}
-/**
- * Decode a JWT and return its `expires` Date and `scopes` array. Errors from
- * `decodeJWT` propagate to the caller — callers that want a soft-fail should
- * wrap this in try/catch.
- */
-export function decodeJwtTokenInfo(token) {
-    const decoded = decodeJWT(token);
-    const exp = typeof decoded.payload.exp === 'number' ? decoded.payload.exp : 0;
-    return {
-        expires: new Date(exp * 1000),
-        scopes: extractJwtScopes(decoded.payload),
-    };
-}
-/**
- * Returns `true` if the token is non-empty, decodes successfully, has not
- * expired (with a small buffer), and includes all required scopes.
- *
- * @param token - The JWT access token
- * @param requiredScopes - Scopes that must all be present in the token (default: none)
- * @param expiryBufferSec - Treat token as expired this many seconds before its real `exp`
- */
-export function isJwtTokenValid(token, requiredScopes = [], expiryBufferSec = DEFAULT_EXPIRY_BUFFER_SEC) {
-    if (!token)
-        return false;
-    let info;
-    try {
-        info = decodeJwtTokenInfo(token);
-    }
-    catch {
-        return false;
-    }
-    const nowSec = Math.floor(Date.now() / 1000);
-    const expSec = Math.floor(info.expires.getTime() / 1000);
-    if (expSec === 0 || nowSec >= expSec - expiryBufferSec)
-        return false;
-    if (requiredScopes.length > 0 && !requiredScopes.every((s) => info.scopes.includes(s))) {
-        return false;
-    }
-    return true;
-}
-//# sourceMappingURL=jwt-utils.js.map

package/dist/cjs/auth/jwt-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-utils.js","sourceRoot":"","sources":["../../../src/auth/jwt-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;GAMG;AACH,OAAO,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAErC,iFAAiF;AACjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAsC,CAAC;IAC7D,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO;QACL,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QAC7B,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAkC,CAAC;KACrE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,iBAA2B,EAAE,EAC7B,kBAA0B,yBAAyB;IAEnD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,IAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,IAAI,MAAM,GAAG,eAAe;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cjs/auth/middleware.d.ts

@@ -1,196 +0,0 @@
-/**
- * Auth Middleware Registry for B2C SDK.
- *
- * Provides a middleware system specifically for authentication requests (OAuth token requests).
- * This is separate from the HTTP middleware registry because auth requests bypass the
- * standard openapi-fetch client middleware chain.
- *
- * ## SDK Usage
- *
- * ```typescript
- * import { globalAuthMiddlewareRegistry, AuthMiddlewareProvider } from '@salesforce/b2c-tooling-sdk/auth';
- *
- * const loggingProvider: AuthMiddlewareProvider = {
- *   name: 'auth-logger',
- *   getMiddleware() {
- *     return {
- *       onRequest({ request }) {
- *         console.log(`[Auth] ${request.method} ${request.url}`);
- *         return request;
- *       },
- *       onResponse({ response }) {
- *         console.log(`[Auth] ${response.status}`);
- *         return response;
- *       },
- *     };
- *   },
- * };
- *
- * globalAuthMiddlewareRegistry.register(loggingProvider);
- * ```
- *
- * ## CLI Plugin Usage
- *
- * Plugins can provide auth middleware via the `b2c:auth-middleware` hook.
- *
- * @module auth/middleware
- */
-/**
- * Middleware interface for authentication requests.
- *
- * Similar to openapi-fetch's Middleware interface, but simplified for auth requests.
- */
-export interface AuthMiddleware {
-    /**
-     * Called before the auth request is sent.
-     * Can modify the request or return a new one.
-     *
-     * @param params - Object containing the request
-     * @returns Modified request, or void to use original
-     */
-    onRequest?(params: {
-        request: Request;
-    }): Promise<Request | void>;
-    /**
-     * Called after the auth response is received.
-     * Can modify the response or return a new one.
-     *
-     * @param params - Object containing request and response
-     * @returns Modified response, or void to use original
-     */
-    onResponse?(params: {
-        request: Request;
-        response: Response;
-    }): Promise<Response | void>;
-}
-/**
- * Middleware provider that supplies middleware for auth requests.
- *
- * @example
- * ```typescript
- * const provider: AuthMiddlewareProvider = {
- *   name: 'user-agent',
- *   getMiddleware() {
- *     return {
- *       onRequest({ request }) {
- *         request.headers.set('User-Agent', 'my-app/1.0');
- *         return request;
- *       },
- *     };
- *   },
- * };
- * ```
- */
-export interface AuthMiddlewareProvider {
-    /**
-     * Human-readable name for the provider (used in logging/debugging).
-     */
-    readonly name: string;
-    /**
-     * Returns middleware for auth requests.
-     *
-     * @returns Middleware to apply, or undefined to skip
-     */
-    getMiddleware(): AuthMiddleware | undefined;
-}
-/**
- * Registry for auth middleware providers.
- *
- * The registry collects middleware from multiple providers and returns
- * them in registration order when requested during OAuth token requests.
- *
- * ## Usage Modes
- *
- * **SDK Mode**: Register providers directly via `register()`:
- * ```typescript
- * globalAuthMiddlewareRegistry.register(myProvider);
- * ```
- *
- * **CLI Mode**: Providers are collected via the `b2c:auth-middleware` hook
- * and registered during command initialization.
- */
-export declare class AuthMiddlewareRegistry {
-    private providers;
-    /**
-     * Registers a middleware provider.
-     *
-     * Providers are called in registration order when middleware is requested.
-     *
-     * @param provider - The provider to register
-     */
-    register(provider: AuthMiddlewareProvider): void;
-    /**
-     * Unregisters a middleware provider by name.
-     *
-     * @param name - The name of the provider to remove
-     * @returns true if a provider was removed, false if not found
-     */
-    unregister(name: string): boolean;
-    /**
-     * Collects middleware from all providers.
-     *
-     * @returns Array of middleware in registration order
-     */
-    getMiddleware(): AuthMiddleware[];
-    /**
-     * Clears all registered providers.
-     *
-     * Primarily useful for testing.
-     */
-    clear(): void;
-    /**
-     * Returns the number of registered providers.
-     */
-    get size(): number;
-    /**
-     * Returns the names of all registered providers.
-     */
-    getProviderNames(): string[];
-}
-/**
- * Global auth middleware registry instance.
- *
- * This is the default registry used by OAuth strategies. Register
- * middleware providers here to have them applied to token requests.
- *
- * @example
- * ```typescript
- * import { globalAuthMiddlewareRegistry } from '@salesforce/b2c-tooling-sdk/auth';
- *
- * globalAuthMiddlewareRegistry.register({
- *   name: 'user-agent',
- *   getMiddleware() {
- *     return {
- *       onRequest({ request }) {
- *         request.headers.set('User-Agent', 'my-app/1.0');
- *         return request;
- *       },
- *     };
- *   },
- * });
- * ```
- */
-export declare const globalAuthMiddlewareRegistry: AuthMiddlewareRegistry;
-/**
- * Applies auth middleware to a request.
- *
- * This helper applies all registered `onRequest` middleware in order,
- * accumulating modifications to the request.
- *
- * @param request - The original request
- * @param middleware - Array of middleware to apply
- * @returns The modified request
- */
-export declare function applyAuthRequestMiddleware(request: Request, middleware: AuthMiddleware[]): Promise<Request>;
-/**
- * Applies auth middleware to a response.
- *
- * This helper applies all registered `onResponse` middleware in order,
- * accumulating modifications to the response.
- *
- * @param request - The original request (for context)
- * @param response - The response to process
- * @param middleware - Array of middleware to apply
- * @returns The modified response
- */
-export declare function applyAuthResponseMiddleware(request: Request, response: Response, middleware: AuthMiddleware[]): Promise<Response>;

package/dist/cjs/auth/middleware.js

@@ -1,190 +0,0 @@
-/*
- * Copyright (c) 2025, Salesforce, Inc.
- * SPDX-License-Identifier: Apache-2
- * For full license text, see the license.txt file in the repo root or http://www.apache.org/licenses/LICENSE-2.0
- */
-/**
- * Auth Middleware Registry for B2C SDK.
- *
- * Provides a middleware system specifically for authentication requests (OAuth token requests).
- * This is separate from the HTTP middleware registry because auth requests bypass the
- * standard openapi-fetch client middleware chain.
- *
- * ## SDK Usage
- *
- * ```typescript
- * import { globalAuthMiddlewareRegistry, AuthMiddlewareProvider } from '@salesforce/b2c-tooling-sdk/auth';
- *
- * const loggingProvider: AuthMiddlewareProvider = {
- *   name: 'auth-logger',
- *   getMiddleware() {
- *     return {
- *       onRequest({ request }) {
- *         console.log(`[Auth] ${request.method} ${request.url}`);
- *         return request;
- *       },
- *       onResponse({ response }) {
- *         console.log(`[Auth] ${response.status}`);
- *         return response;
- *       },
- *     };
- *   },
- * };
- *
- * globalAuthMiddlewareRegistry.register(loggingProvider);
- * ```
- *
- * ## CLI Plugin Usage
- *
- * Plugins can provide auth middleware via the `b2c:auth-middleware` hook.
- *
- * @module auth/middleware
- */
-/**
- * Registry for auth middleware providers.
- *
- * The registry collects middleware from multiple providers and returns
- * them in registration order when requested during OAuth token requests.
- *
- * ## Usage Modes
- *
- * **SDK Mode**: Register providers directly via `register()`:
- * ```typescript
- * globalAuthMiddlewareRegistry.register(myProvider);
- * ```
- *
- * **CLI Mode**: Providers are collected via the `b2c:auth-middleware` hook
- * and registered during command initialization.
- */
-export class AuthMiddlewareRegistry {
-    providers = [];
-    /**
-     * Registers a middleware provider.
-     *
-     * Providers are called in registration order when middleware is requested.
-     *
-     * @param provider - The provider to register
-     */
-    register(provider) {
-        this.providers.push(provider);
-    }
-    /**
-     * Unregisters a middleware provider by name.
-     *
-     * @param name - The name of the provider to remove
-     * @returns true if a provider was removed, false if not found
-     */
-    unregister(name) {
-        const index = this.providers.findIndex((p) => p.name === name);
-        if (index >= 0) {
-            this.providers.splice(index, 1);
-            return true;
-        }
-        return false;
-    }
-    /**
-     * Collects middleware from all providers.
-     *
-     * @returns Array of middleware in registration order
-     */
-    getMiddleware() {
-        const middleware = [];
-        for (const provider of this.providers) {
-            const m = provider.getMiddleware();
-            if (m) {
-                middleware.push(m);
-            }
-        }
-        return middleware;
-    }
-    /**
-     * Clears all registered providers.
-     *
-     * Primarily useful for testing.
-     */
-    clear() {
-        this.providers = [];
-    }
-    /**
-     * Returns the number of registered providers.
-     */
-    get size() {
-        return this.providers.length;
-    }
-    /**
-     * Returns the names of all registered providers.
-     */
-    getProviderNames() {
-        return this.providers.map((p) => p.name);
-    }
-}
-/**
- * Global auth middleware registry instance.
- *
- * This is the default registry used by OAuth strategies. Register
- * middleware providers here to have them applied to token requests.
- *
- * @example
- * ```typescript
- * import { globalAuthMiddlewareRegistry } from '@salesforce/b2c-tooling-sdk/auth';
- *
- * globalAuthMiddlewareRegistry.register({
- *   name: 'user-agent',
- *   getMiddleware() {
- *     return {
- *       onRequest({ request }) {
- *         request.headers.set('User-Agent', 'my-app/1.0');
- *         return request;
- *       },
- *     };
- *   },
- * });
- * ```
- */
-export const globalAuthMiddlewareRegistry = new AuthMiddlewareRegistry();
-/**
- * Applies auth middleware to a request.
- *
- * This helper applies all registered `onRequest` middleware in order,
- * accumulating modifications to the request.
- *
- * @param request - The original request
- * @param middleware - Array of middleware to apply
- * @returns The modified request
- */
-export async function applyAuthRequestMiddleware(request, middleware) {
-    let currentRequest = request;
-    for (const m of middleware) {
-        if (m.onRequest) {
-            const result = await m.onRequest({ request: currentRequest });
-            if (result) {
-                currentRequest = result;
-            }
-        }
-    }
-    return currentRequest;
-}
-/**
- * Applies auth middleware to a response.
- *
- * This helper applies all registered `onResponse` middleware in order,
- * accumulating modifications to the response.
- *
- * @param request - The original request (for context)
- * @param response - The response to process
- * @param middleware - Array of middleware to apply
- * @returns The modified response
- */
-export async function applyAuthResponseMiddleware(request, response, middleware) {
-    let currentResponse = response;
-    for (const m of middleware) {
-        if (m.onResponse) {
-            const result = await m.onResponse({ request, response: currentResponse });
-            if (result) {
-                currentResponse = result;
-            }
-        }
-    }
-    return currentResponse;
-}
-//# sourceMappingURL=middleware.js.map

package/dist/cjs/auth/middleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/auth/middleware.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AA2DH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,sBAAsB;IACzB,SAAS,GAA6B,EAAE,CAAC;IAEjD;;;;;;OAMG;IACH,QAAQ,CAAC,QAAgC;QACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,IAAY;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC/D,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,MAAM,UAAU,GAAqB,EAAE,CAAC;QAExC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC,EAAE,CAAC;gBACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,sBAAsB,EAAE,CAAC;AAEzE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAAgB,EAAE,UAA4B;IAC7F,IAAI,cAAc,GAAG,OAAO,CAAC;IAE7B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,EAAC,OAAO,EAAE,cAAc,EAAC,CAAC,CAAC;YAC5D,IAAI,MAAM,EAAE,CAAC;gBACX,cAAc,GAAG,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAgB,EAChB,QAAkB,EAClB,UAA4B;IAE5B,IAAI,eAAe,GAAG,QAAQ,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,UAAU,CAAC,EAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAC,CAAC,CAAC;YACxE,IAAI,MAAM,EAAE,CAAC;gBACX,eAAe,GAAG,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/cjs/auth/oauth-implicit.d.ts

@@ -1,89 +0,0 @@
-import type { AuthStrategy, AccessTokenResponse, DecodedJWT, FetchInit } from './types.js';
-/**
- * Configuration for the implicit OAuth flow.
- */
-export interface ImplicitOAuthConfig {
-    /** OAuth client ID registered with Account Manager */
-    clientId: string;
-    /** OAuth scopes to request (e.g., 'sfcc.products', 'sfcc.orders') */
-    scopes?: string[];
-    /** Account Manager host (defaults to 'account.demandware.com') */
-    accountManagerHost?: string;
-    /**
-     * Local port for the OAuth redirect server.
-     * Defaults to 8080 or SFCC_OAUTH_LOCAL_PORT environment variable.
-     */
-    localPort?: number;
-    /**
-     * Full redirect URI for OAuth. Use when running behind a proxy where
-     * localhost cannot be reached directly by the browser.
-     * Defaults to `http://localhost:${localPort}` or SFCC_REDIRECT_URI environment variable.
-     * The local server still listens on localPort regardless of this setting.
-     */
-    redirectUri?: string;
-    /**
-     * Custom browser opener. Receives the authorization URL and should open it
-     * in the user's browser. Useful in environments where the default `open` package
-     * doesn't work (e.g., VS Code remote/Codespaces where `vscode.env.openExternal` is needed).
-     */
-    openBrowser?: (url: string) => Promise<void>;
-}
-/**
- * OAuth 2.0 Implicit Grant Flow authentication strategy.
- *
- * This strategy is used when only a client ID is available (no client secret).
- * It opens a browser for the user to authenticate with Account Manager,
- * then captures the access token from the OAuth redirect.
- *
- * Note: The access token from implicit flow is valid for 30 minutes and cannot be renewed.
- * This flow requires user interaction and a TTY.
- *
- * @example
- * ```typescript
- * import { ImplicitOAuthStrategy } from '@salesforce/b2c-tooling-sdk';
- *
- * const auth = new ImplicitOAuthStrategy({
- *   clientId: 'your-client-id',
- *   scopes: ['sfcc.products', 'sfcc.orders'],
- * });
- *
- * // Will open browser for authentication
- * const response = await auth.fetch('https://example.com/api/resource');
- * ```
- */
-export declare class ImplicitOAuthStrategy implements AuthStrategy {
-    private config;
-    private accountManagerHost;
-    private localPort;
-    private redirectUri;
-    private _hasHadSuccess;
-    constructor(config: ImplicitOAuthConfig);
-    fetch(url: string, init?: FetchInit): Promise<Response>;
-    getAuthorizationHeader(): Promise<string>;
-    /**
-     * Gets the decoded JWT payload
-     */
-    getJWT(): Promise<DecodedJWT>;
-    /**
-     * Gets the full token response including expiration and scopes.
-     * Useful for commands that need to display or return token metadata.
-     */
-    getTokenResponse(): Promise<AccessTokenResponse>;
-    /**
-     * Invalidates the cached token, forcing re-authentication on next request
-     */
-    invalidateToken(): void;
-    /**
-     * Gets an access token, using cache if valid.
-     * Uses a mutex to prevent concurrent auth flows for the same clientId.
-     */
-    private getAccessToken;
-    /**
-     * Performs an implicit OAuth2 login flow.
-     * Opens the user's browser for authentication with Account Manager.
-     *
-     * NOTE: This method requires a TTY and user intervention; it is interactive.
-     * NOTE: Access token is valid for 30 minutes and cannot be renewed.
-     */
-    private implicitFlowLogin;
-}